It's because her firewall blocks the referrer variable from your site; it should have an option to not block it...
Some idiots at these firewall companies seem to think it's a vast privacy error to show where a user just came from, which in turn mucks up security.